Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
31/07/2026, 06:15
General
- Target REKAP-MHSISWA.xlsx
- Size 91KB
- Sample260731-gzzd2aea94
- SHA256 5676989e11b85538acbdee2b51846951379c51c8ae094da5345bc933384d1df0
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 18 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\REKAP-MHSISWA.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
b8ab77100df80ab2.customDestinations-ms
memory/1400-0-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-1-0x00007FFAD735F000-0x00007FFAD7360000-memory.dmp
memory/1400-3-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-2-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-5-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-4-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-6-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-7-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-8-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-9-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-10-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-11-0x00007FFA94610000-0x00007FFA94620000-memory.dmp
memory/1400-12-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-13-0x00007FFA94610000-0x00007FFA94620000-memory.dmp
memory/1400-15-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-14-0x000001BDD77D0000-0x000001BDD7972000-memory.dmp
memory/1400-16-0x000001BDDA3E0000-0x000001BDDCE40000-memory.dmp
memory/1400-18-0x000001BDBF4A0000-0x000001BDBF4FC000-memory.dmp
memory/1400-17-0x000001BDD8840000-0x000001BDD8AD4000-memory.dmp
memory/1400-19-0x000001BDD8AE0000-0x000001BDD8CA2000-memory.dmp
memory/1400-20-0x000001BDB7960000-0x000001BDB7982000-memory.dmp
memory/1400-21-0x000001BDDCE40000-0x000001BDDDBD0000-memory.dmp
memory/1400-22-0x000001BDB7950000-0x000001BDB7960000-memory.dmp
memory/1400-23-0x000001BDD7570000-0x000001BDD757A000-memory.dmp
memory/1400-24-0x00007FFAD735F000-0x00007FFAD7360000-memory.dmp
memory/1400-25-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-26-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-27-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-29-0x000001BDD7580000-0x000001BDD75A2000-memory.dmp
memory/1400-30-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-31-0x000001BDE1EF0000-0x000001BDE6206000-memory.dmp
memory/1400-32-0x000001BDD75B0000-0x000001BDD75D8000-memory.dmp
memory/1400-33-0x000001BDD7670000-0x000001BDD76C0000-memory.dmp
memory/1400-34-0x000001BDB79B0000-0x000001BDB79C0000-memory.dmp
memory/1400-35-0x000001BDD7550000-0x000001BDD7568000-memory.dmp
memory/1400-36-0x000001BDD85A0000-0x000001BDD85FA000-memory.dmp
memory/1400-37-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-38-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-39-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-40-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-42-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-43-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-44-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-56-0x000001BDBDAF0000-0x000001BDBE018000-memory.dmp
memory/1400-57-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-59-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp
memory/1400-58-0x000001BDBBE00000-0x000001BDBBEFC000-memory.dmp
memory/1400-76-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-77-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-78-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-79-0x00007FFA97340000-0x00007FFA97350000-memory.dmp
memory/1400-80-0x00007FFAD7200000-0x00007FFAD7463000-memory.dmp